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IN THE CLAIMS 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

Claim 1 (currently amended) An embedded intrusion detection system for ensuring 
website security, the website providing information or a service via a network for a plurality of 
user computers, and the communication protocol between the user and the website being defined 
as a first protocol, the system comprising: 

at least one server computer for providing an information or service platform to the user 
computers; 

at least one monitor computer connected to the server computer for monitoring the status 
of the server computer; 

a system status collecting module stored on the server computer or on the monitor 
computer, the system status collecting module comprising :a collecting unit for collecting 
monitor data; and 

a transmitting unit for obeying the first protocol to transmit the monitor data to the 
monitor computer ; and 

a monitoring module stored in the monitor computer, the monitoring module comprising: 

an analyzing unit for receiving and analyzing the monitor data collected by the system 
status collecting module on the server computer; and 

a control unit for controlling the execution of the system status collecting module [[.]] ^ 

wherein an unexecuted system status collecting module is stored on the monitor 
computer, and before the system status collecting module is executed, the control unit in the 
monitoring module will first send a copy of the unexecuted system status collecting module to 
the server computer, and the se rver computer will execute the copy of the system status 
collecting module, and when the system status collecting module is finished executing, the 
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control unit in the monitoring mod ule will delete the copied system status collecting module on 
the server computer. 



Claim 2 (original) The embedded intrusion detection system of claim 1, wherein the first 
protocol is HTTP (Hyper Text Transport Protocol). 

Claim 3 (original) The embedded intrusion detection system of claim 1 , wherein the 
system status collecting module is stored on the server computer, and the control unit in the 
monitoring module controls the execution of the system status collecting module. 

Claim 4 (canceled) 



Claim 5 (original) The embedded intrusion detection system of claim 1, wherein the 
unexecuted system status collecting module is stored on the monitor computer, and before the 
system status collecting module is executed, the control unit in the monitoring module will send 
the system status collecting module to the server computer and the server computer will execute 
the system status collecting module, and when the system status collecting module is finished 
executing, the control unit in the monitoring module will send the system status collecting 
module back to the monitor computer. 
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